IndexedVerified

JavaScript/TypeScript Security

JavaScript, TypeScript, and Node.js SAST rules aggregated across verified providers.

Fetch pack

greprules pack fetch javascript-typescript-security --engine opengrep

curl https://api.greprules.io/api/packs/javascript-typescript-security.tar.gz -o javascript-typescript-security.tar.gz

Owner: Provally
Total rules: 578
Downloads: 5
Last updated: 2026-06-29
Languages: JS/TS

Included rules

CVE-2026-56697: Missing Host Check Open Redirectcve-2026-56697-missing-host-check-open-redirectCVE-2026-56348: Typeorm Unscoped Private Or Conditioncve-2026-56348-typeorm-unscoped-private-or-conditionCVE-2026-56326: Unchecked Url Pathname Reconstructioncve-2026-56326-unchecked-url-pathname-reconstructionCVE-2026-56317: Innerhtml Array Join Xsscve-2026-56317-innerhtml-array-join-xssCVE-2026-55886: Html Sanitizer Blocklist By Selectorcve-2026-55886-html-sanitizer-blocklist-by-selectorCVE-2026-55660: Decoded Path Traversal Taintcve-2026-55660-decoded-path-traversal-taintCVE-2026-55617: Custom Session Recreate Without Deletecve-2026-55617-custom-session-recreate-without-deleteCVE-2026-55091: Flat To Nested Proto Pollutioncve-2026-55091-flat-to-nested-proto-pollutionCVE-2026-54328: Predictable Temp Dir Path Traversalcve-2026-54328-predictable-temp-dir-path-traversalCVE-2026-54306: N8n Typeorm Unintended Or Query Bolacve-2026-54306-n8n-typeorm-unintended-or-query-bolaCVE-2026-54305: N8n Typeorm Unconstrained Personal Projectcve-2026-54305-n8n-typeorm-unconstrained-personal-projectCVE-2026-54304: Typeorm Insecure Or User Bypasscve-2026-54304-typeorm-insecure-or-user-bypassCVE-2026-54301: Project Repository Ts Cwe 79 Cve 2026 54301cve-2026-54301-project-repository-ts-cwe-79-cve-2026-54301CVE-2026-54290: Jwt Jwk Algorithm Confusioncve-2026-54290-jwt-jwk-algorithm-confusionCVE-2026-54288: Hono Jwt Missing Jwk Extractioncve-2026-54288-hono-jwt-missing-jwk-extractionCVE-2026-54287: Hono Jwt Jwk Alg Confusioncve-2026-54287-hono-jwt-jwk-alg-confusionCVE-2026-54286: Hono Jwt Sign Alg Not From Keycve-2026-54286-hono-jwt-sign-alg-not-from-keyCVE-2026-54268: Angular Format Date Dos Missing Length Limitcve-2026-54268-angular-format-date-dos-missing-length-limitCVE-2026-54267: Missing Tagname Check Dom Clobberingcve-2026-54267-missing-tagname-check-dom-clobberingCVE-2026-54264: Cross Origin Sensitive Header Leakcve-2026-54264-cross-origin-sensitive-header-leakCVE-2026-54074: Tinacms Unvalidated Media Pathcve-2026-54074-tinacms-unvalidated-media-pathCVE-2026-53930: Axios Insecure Validatestatus Ssrfcve-2026-53930-axios-insecure-validatestatus-ssrfCVE-2026-53927: Uipost Operations Ts Cwe 918 Cve 2026 53927cve-2026-53927-uipost-operations-ts-cwe-918-cve-2026-53927CVE-2026-52725: Angular Unrestricted Selectrootelementcve-2026-52725-angular-unrestricted-selectrootelement

24 of 578 loaded